• Preferably a CISA.
• Strong Knowledge in Overall of Internal Audit
• 3-5 years of experience in Professional IT Auditor

Key Responsibility

• Perform an IT audit and testing ITGC (Information Technology General Computer Control), Data Analysis and utilize technology effectively.
• Take part of integrated audit by performing test of IT dependency controls e.g., automated application control, IT dependent report, system access and authorization control.
• Analyze and solve problems especially big data analysis.
• Assess and giving advice on IT/network security architecture design
• Assess risk related to information and cybersecurity and evaluate effectiveness of internal controls based on industrial-accepted standard e.g., Information Security Management System (ISMS)
• Assess and giving advice on security technology and security-related configuration e.g., firewall, IDS/IPS, Content filtering, Network routing equipment, Wifi controller, Network access Control, etc.
• Provide overall co-ordination of the audit planning for the areas/ programs under his/her supervision, and supervise the follow up process of subordinates to ensure timely dispatch of audit reports to auditee and obtaining reply from auditee on the implementation status of recommendations
• Delegate, allocate and assign resources to carry out the audit work, and advise, supervise, and oversee the audit activities carried out by the IA as per the Annual Audit Plan.
• Discuss with GCAE for major risk or audit findings identified during audit.
• Oversee the follow up process of the Senior Internal Auditor to ensure timely dispatch of audit reports to auditee and obtaining reply from auditee on the implementation status of recommendations.
• Review and discuss on the reply received from auditee for any disputes or disagreement.
• To ensure that audit engagements are conducted in accordance with the audit work program and objectives of the audit have been achieved.
• Carry out special / investigation audit assigned by GCAE.
• Participate in the Exit meeting with auditee’s management to discuss on the audit findings identified during audit.

Qualifications

• Bachelor's degree preferably in IT, Computer Science or Engineering, Statistic.
• Having 3-5 years of experience in Professional IT Auditor or an equivalent function or experience in auditing firms or as internal auditor more than 7 years
• Preferably proficient in Oracle or any other related Accounting System. Working knowledge in IT Auditor; highly proficient with ERP configurations e.g., SAP and Oracle. Ability to apply best practices of one ERP system in other ERP systems.
• Able to work to upcountry or overseas
• Preferably a CISA.
• Excellent communication skills in both oral and written English
• Able to appreciate business process issues and understand business transaction scenarios, and how an application system (e.g., SAP, Oracle, etc.) can support them
• Basic understanding of ERP configurations e.g., SAP, Oracle. Ability to apply best practices of one ERP system in other ERP systems
• Resourceful and able to work out technical solutions
• Good appreciation of fundamental accounting knowledge and/or audit knowledge and financial controls
• Good grasp of IT technical concepts, e.g., Operating Systems (Unix, Windows, etc), Databases (Oracle, SQL, etc.)
• Able to handle multiple tasks and assignments
• Logical thinking, good attitude, fast learner and good team player
• Working independently without closely supervisor.
• Ability to persuade and influence others, to motivate others and promote teamwork and mentor any others, and to provide effective feedback.
• Certification/Licensure Certified Information System Auditor (CISA), (Preferred).

Lotus's
Ek-Chai Distribution System Co., Ltd.
Buengkum, Bangkok 10230, Thailand

“By applying for this position, you consent to the collection, use and disclosure of your personal data to us, our recruitment firms and all relevant third parties for the purpose of processing your application for this job position (or any other suitable positions within Lotus's and its subsidiaries, if any). You understand and acknowledge that your personal data will be processed in accordance with the law and our policy.”